6 matches found
GHSA-5957-5C94-3V7W Jodit has prototype pollution via Jodit.configure() / ConfigMerge
Summary Jodit.configureoptions — and the internal ConfigMerge / ConfigProto helpers — merged user-supplied options into the editor configuration without filtering prototype-mutating keys. A payload nested under an existing plain-object option such as controls could reach and mutate Object.prototy...
6.3CVSS5.8AI score0.00462EPSS
SaveExploits0References5
20